Commit Graph

11429 Commits

Author SHA1 Message Date
Franziskus Kiefer
83cdc02ec0 Bug 1345368 - land NSS 848abc2061a4, r=me
--HG--
rename : security/nss/fuzz/git-copy.sh => security/nss/fuzz/config/git-copy.sh
rename : security/nss/fuzz/certDN.options => security/nss/fuzz/options/certDN.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-add.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-addmod.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-div.options
rename : security/nss/fuzz/mpi-expmod.options => security/nss/fuzz/options/mpi-expmod.options
rename : security/nss/fuzz/mpi-invmod.options => security/nss/fuzz/options/mpi-invmod.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-mod.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-mulmod.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-sqr.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-sqrmod.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-sub.options
rename : security/nss/fuzz/mpi-mod.options => security/nss/fuzz/options/mpi-submod.options
rename : security/nss/fuzz/quickder.options => security/nss/fuzz/options/quickder.options
rename : security/nss/fuzz/tls-client.options => security/nss/fuzz/options/tls-client-no_fuzzer_mode.options
rename : security/nss/fuzz/tls-client.options => security/nss/fuzz/options/tls-client.options
2017-03-10 06:01:18 +01:00
Joel Maher
41e6060a92 Bug 1344829 - add BUG_COMPONENT to security/* files. r=keeler
MozReview-Commit-ID: AS6e14FOqsb
2017-03-09 05:33:30 -05:00
Bob Owen
b2f5aa5c23 Bug 1337331 Part 5: Re-apply - Add KEY_WOW64_64Key and KEY_WOW64_32KEY to the Chromium sandbox allowed registry read flags. r=aklotz
Carrying r=aklotz from previous changset:
https://hg.mozilla.org/mozilla-central/rev/d24db55deb85
2016-12-22 11:11:07 +00:00
Cykesiopka
0aa3a82f68 Bug 1310127 - Part 10: Handle netwerk/protocol/http MOZ_MUST_USE functions in PSM. r=wcpan
The only unhandled call updates nsHTTPListener::mHttpResponseContentType, but
nothing actually uses the value of mHttpResponseContentType.

MozReview-Commit-ID: FQXESvoO2ZN

--HG--
extra : rebase_source : 547158311de136054acff2539ea6a8bdbfb8227b
2016-12-28 16:25:22 +08:00
David Major
ed0b8f8653 Bug 1344615: Remove nsXPCOMStrings.{h,cpp} r=bsmedberg
These are now dead code.

MozReview-Commit-ID: AClU0Qx3kmN

--HG--
extra : rebase_source : df83cf89292da1519bb26027c11e14923d5c54a0
2017-03-06 17:52:54 +13:00
ffxbld
86d9d13c29 No bug, Automated HPKP preload list update from host bld-linux64-spot-393 - a=hpkp-update 2017-03-06 07:21:45 -08:00
ffxbld
31efc98388 No bug, Automated HSTS preload list update from host bld-linux64-spot-393 - a=hsts-update 2017-03-06 07:21:43 -08:00
Carsten "Tomcat" Book
cec6c3f714 merge autoland to mozilla-central a=merge 2017-03-06 10:51:51 +01:00
ffxbld
e844f7b79d No bug, Automated HPKP preload list update from host bld-linux64-spot-032 - a=hpkp-update 2017-03-05 08:00:14 -08:00
ffxbld
330b3dec22 No bug, Automated HSTS preload list update from host bld-linux64-spot-032 - a=hsts-update 2017-03-05 08:00:12 -08:00
ffxbld
8dcf6f318c No bug, Automated HPKP preload list update from host bld-linux64-spot-309 - a=hpkp-update 2017-03-04 07:58:31 -08:00
ffxbld
e9085b277f No bug, Automated HSTS preload list update from host bld-linux64-spot-309 - a=hsts-update 2017-03-04 07:58:28 -08:00
Carsten "Tomcat" Book
06813a3df9 Merge mozilla-central to mozilla-inbound 2017-03-03 13:06:37 +01:00
Wes Kocher
901a8c09c1 Merge m-c to autoland, a=merge
MozReview-Commit-ID: AZeTEvGhLd1
2017-03-02 15:03:44 -08:00
ffxbld
546a05fec0 No bug, Automated HPKP preload list update from host bld-linux64-spot-031 - a=hpkp-update 2017-03-02 07:42:44 -08:00
ffxbld
52a438e1a4 No bug, Automated HSTS preload list update from host bld-linux64-spot-031 - a=hsts-update 2017-03-02 07:42:42 -08:00
Masatoshi Kimura
5716d510ff Bug 1279479 - Remove DHE cipher suites from TLS 1.3 ClientHello. r=keeler,mt
Hiding cipher suites behind fallback to measure the impact of DHE removal. This patch itself will not improve security because MITM can trigger the fallback.

Unlike the previous attempt, this patch will not affect WebRTC because it does not touch default cipher prefs.

MozReview-Commit-ID: 82paUEuPu99

--HG--
extra : rebase_source : dd08b00ca0d618d0e2ac9c79ae8f32610e724dbd
2017-03-01 20:57:08 +09:00
Franziskus Kiefer
d19d7643c7 Bug 1334127 - land NSS dec8c06d7ed9, r=me
--HG--
extra : rebase_source : 02a6633fa7c02bd65c76cb1aad8c3875aca305ea
2017-03-03 11:44:57 +01:00
Andrea Marchesini
24004054a8 Bug 1334975 - Get rid of nsIFilePicker.show() use in gecko, r=ochameau 2017-03-03 09:42:27 +01:00
Wes Kocher
9746f81e53 Merge m-c to autoland, a=merge
MozReview-Commit-ID: FzykkWPQCrq

--HG--
rename : browser/modules/test/browser_UsageTelemetry_content.js => browser/modules/test/browser/browser_UsageTelemetry_content.js
rename : browser/modules/test/browser_UsageTelemetry_content_aboutHome.js => browser/modules/test/browser/browser_UsageTelemetry_content_aboutHome.js
rename : browser/modules/test/browser_UsageTelemetry_searchbar.js => browser/modules/test/browser/browser_UsageTelemetry_searchbar.js
rename : browser/modules/test/browser_UsageTelemetry_urlbar.js => browser/modules/test/browser/browser_UsageTelemetry_urlbar.js
2017-03-01 17:48:44 -08:00
Wes Kocher
3cbb52bd7d Merge inbound to central, a=merge
MozReview-Commit-ID: 7vInHaD1geB
2017-03-01 17:18:37 -08:00
ffxbld
5fd3e1e3aa No bug, Automated HPKP preload list update from host bld-linux64-spot-039 - a=hpkp-update 2017-03-01 07:47:15 -08:00
ffxbld
c5c4be92d2 No bug, Automated HSTS preload list update from host bld-linux64-spot-039 - a=hsts-update 2017-03-01 07:47:12 -08:00
Wes Kocher
3f87d6f0d5 Merge m-c to autoland, a=merge b557bdc314e7
MozReview-Commit-ID: HDM5eTkVNDa
2017-03-01 16:27:28 -08:00
Franziskus Kiefer
0c87943561 Bug 1334127 - land NSS 6511e19a2c6c, r=me
--HG--
extra : rebase_source : 966e28d8676669276d9fd01d47315c5cafa4ee24
2017-02-28 13:52:02 +01:00
Carsten "Tomcat" Book
24bb9f3ffe Merge mozilla-central to mozilla-inbound 2017-02-28 13:03:04 +01:00
Wes Kocher
1b29a33fce Merge m-c to autoland, a=merge
MozReview-Commit-ID: K0Q4b2wzvlJ
2017-03-03 17:29:54 -08:00
Haik Aftandilian
8f8a9f5255 Bug 1344106 - Remove Linux todos() now that Linux sandboxing is riding the trains. r=haik
MozReview-Commit-ID: 9tI2S6fEYkD

--HG--
extra : rebase_source : 0a5d00f8498861e7ea281e527b2be6b2c4e472d6
2017-03-03 09:50:29 +01:00
Bob Owen
d30aee57bf Bug 1339729: Remove wow_helper from Windows process sandboxing. r=glandium 2017-03-01 10:41:07 +00:00
Cykesiopka
895edf7133 Bug 1338895 - Avoid non-smart string IDL types in remaining PSM IDL files. r=aklotz,keeler
Smart string classes like nsCString are safer to use than raw |char*| strings,
and are typically easier to deal with as well.

MozReview-Commit-ID: 18C293zWrJw

--HG--
extra : rebase_source : 350191d4c3047fb38d18e8c6d9370cd059007861
2017-02-26 20:36:40 +08:00
Jan Beich
ce968eef85 Bug 1346305 - Unbreak --enable-warnings-as-errors on FreeBSD after bug 1343557. r=keeler
MozReview-Commit-ID: 3gZCXTK1GJI

--HG--
extra : rebase_source : 0de5fc52517c71db1c74814b5dcf096a8ceac593
2017-03-10 18:02:44 +00:00
Mathieu Leplatre
0d98f89e16 Bug 1343216 - Add blocklist tags in xpcshell tests r=kmag
MozReview-Commit-ID: 8HDgdSSFxyU

--HG--
extra : rebase_source : 49a73ffcd60ea9f770ad7bc600512be19551fe5e
2017-03-02 11:23:24 +01:00
Honza Bambas
654b5c9af9 Bug 1320458 - Make logging by sandboxed child processes to a file work on Windows, r=aklotz
MozReview-Commit-ID: 7eiW3Lo6q8Z
2017-03-06 17:42:31 +01:00
David Parks
672079f03f Bug 1329328 - Permit sandboxed processes to access Flash temporary files. r=bobowen
Allows the creation/use of temp files when the user has already green-lit
the use of a file for write purposes in that folder.
2017-02-27 14:15:52 -08:00
Wes Kocher
1e95bd721f Merge inbound to central, a=merge
MozReview-Commit-ID: F0XvCKnh8H7
2017-02-27 13:34:55 -08:00
ffxbld
4039fb4c58 No bug, Automated HPKP preload list update from host bld-linux64-spot-031 - a=hpkp-update 2017-02-27 07:28:02 -08:00
ffxbld
c8f79e9d17 No bug, Automated HSTS preload list update from host bld-linux64-spot-031 - a=hsts-update 2017-02-27 07:28:00 -08:00
Benjamin Bouvier
bcd3dcc6b3 Bug 1342385: Allow mremap on linux32 for wasm; r=jld
MozReview-Commit-ID: 82f8ryvd57S

--HG--
extra : rebase_source : 0e74611052853f149eb0fefe8fef849a8f8978b0
extra : amend_source : ff91bb31d45ca4783da391e519f10e3613f0f890
2017-02-24 13:18:57 +01:00
Cykesiopka
90e8bc1b28 Bug 1026589 - Enable more GCC/Clang compiler warnings (-Wextra) for security/certverifier. r=keeler
Original patch by Camilo Viecco.

MozReview-Commit-ID: 4LWpueoyQHL

--HG--
extra : rebase_source : 85563711287ad851019c4031d97c1d309f066139
2017-02-23 23:19:55 +08:00
Cykesiopka
58de7b2c68 Bug 1342075 - Make nsCertOverride::OverrideBits an enum class. r=keeler
MozReview-Commit-ID: 3aLyL9VDvpf

--HG--
extra : rebase_source : 3b4a1837ed8233ab5a1af71707ca92d7f3699041
2017-02-23 23:16:53 +08:00
ffxbld
90d1cbb4fd No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update 2017-02-26 07:19:31 -08:00
ffxbld
5c63ba8319 No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update 2017-02-26 07:19:28 -08:00
ffxbld
93f1641e39 No bug, Automated HPKP preload list update from host bld-linux64-spot-361 - a=hpkp-update 2017-02-25 07:22:43 -08:00
ffxbld
baf95bc4f8 No bug, Automated HSTS preload list update from host bld-linux64-spot-361 - a=hsts-update 2017-02-25 07:22:41 -08:00
ffxbld
2c84b59bb2 No bug, Automated HPKP preload list update from host bld-linux64-spot-025 - a=hpkp-update 2017-02-24 08:12:13 -08:00
ffxbld
53ced57059 No bug, Automated HSTS preload list update from host bld-linux64-spot-025 - a=hsts-update 2017-02-24 08:12:11 -08:00
Wes Kocher
39dbca81b0 Merge m-c to inbound, a=merge
MozReview-Commit-ID: BYjLy4wkFjg
2017-02-23 16:57:34 -08:00
ffxbld
60ae6514e4 No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update 2017-02-23 07:36:26 -08:00
ffxbld
ad3be07b91 No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update 2017-02-23 07:36:24 -08:00
Carsten "Tomcat" Book
e6b82618f4 merge mozilla-inbound to mozilla-central a=merge 2017-02-23 14:59:37 +01:00
David Keeler
fca1830f46 bug 1341905 - double-check that uses of CERT_LIST_* are safe in PSM r=jcj
MozReview-Commit-ID: BhGHd9xUUbP

--HG--
extra : amend_source : b7f8260719a3d918867a8ed7cf092e2909193bb5
2017-02-22 15:07:05 -08:00
Jeff Walden
d5deea2a4f Bug 1338374 - Make Vector not use AlignedStorage for its inline element storage. r=froydnj, r=keeler
--HG--
extra : rebase_source : 81eb5278404b4843ed5a59819f6000f74200aa41
2017-01-30 15:56:05 -08:00
Wes Kocher
29443ed98c Merge m-c to inbound, a=merge
MozReview-Commit-ID: HDHJC8X9xWG
2017-02-22 15:06:46 -08:00
Wes Kocher
b7294d3167 Merge inbound to central, a=merge
MozReview-Commit-ID: 2R3yE5OIznC
2017-02-22 15:01:04 -08:00
Wes Kocher
5a7f5284cd Merge autoland to central, a=merge
MozReview-Commit-ID: 5l8P3DzMNXz
2017-02-22 14:55:21 -08:00
Kai Engert
fb7e5cbb5d Bug 1324096, PSM should check the roots module for a flag, that allows to distinguish between Mozilla-CA-Policy CAs and other CAs, r=dkeeler 2017-02-22 18:02:48 +01:00
ffxbld
b1044cf7c2 No bug, Automated HPKP preload list update from host bld-linux64-spot-038 - a=hpkp-update 2017-02-22 08:08:41 -08:00
ffxbld
138dd68d33 No bug, Automated HSTS preload list update from host bld-linux64-spot-038 - a=hsts-update 2017-02-22 08:08:39 -08:00
Wes Kocher
5295bd9f91 Merge m-c to inbound, a=merge
MozReview-Commit-ID: AoD5GpFatBw
2017-02-21 17:41:05 -08:00
Wes Kocher
13e1cccb3f Merge inbound to central, a=merge
MozReview-Commit-ID: EEMZdLCheAm
2017-02-21 17:35:01 -08:00
Sebastian Hengst
0de0267fd3 Backed out changeset d0a0da23ac05 (bug 1334975) for frequent failures of test_chrome_ext_downloads_saveAs.html. r=backout 2017-02-21 17:54:27 +01:00
ffxbld
fa4cd674a4 No bug, Automated HPKP preload list update from host bld-linux64-spot-037 - a=hpkp-update 2017-02-21 07:31:37 -08:00
ffxbld
a3f4155b6b No bug, Automated HSTS preload list update from host bld-linux64-spot-037 - a=hsts-update 2017-02-21 07:31:35 -08:00
Carsten "Tomcat" Book
9956afa503 Backed out changeset 597004bec637 (bug 1334975) for test failures in test_chrome_ext_downloads_saveAs.html 2017-02-21 10:30:41 +01:00
Jed Davis
a01b0b45dd Bug 1286865 - Step 4: Report rejected syscall info in Telemetry. r=gcp r=francois
MozReview-Commit-ID: 7R755WT1Ftu

--HG--
extra : rebase_source : 77356e29da9a02a3a4392be3de0e9e88ed9e131e
extra : histedit_source : 813980d967009d4270143ce3a503836c7337941f
2017-02-20 19:55:56 +01:00
Andrea Marchesini
886c391f8f Bug 1334975 - Get rid of nsIFilePicker.show() use in gecko, r=Gijs, r=ochameau 2017-02-21 15:04:32 +01:00
Franziskus Kiefer
9fcb9743ee Bug 1334127 - land NSS 93b99b0936d3, r=me
--HG--
extra : rebase_source : 5793f0f4595bb1bbff9338dca3e4f5068db5a47f
2017-02-21 13:55:41 +01:00
Jed Davis
f0666046d6 Bug 1286865 - Step 2: Add XPCOM bindings for sandbox syscall reporter. r=gcp r=glandium
MozReview-Commit-ID: GERRsOJ7H2w

--HG--
extra : rebase_source : 8ff688150ccf417a266a663ed0973d4850f51e63
2017-01-30 18:50:41 -07:00
Jed Davis
f2fa27edca Bug 1286865 - Step 1: Gather syscall info from SIGSYS handlers into the parent process. r=gcp
MozReview-Commit-ID: 8GfFo4xso65

--HG--
extra : rebase_source : 1596a79d65d30dc72d8b84fc4f1639de377f554a
2017-01-30 18:49:53 -07:00
Jed Davis
eb0d19601a Bug 1286865 - Step 0: Turn off crash-on-seccomp-fail by default on non-nightly. r=gcp
MozReview-Commit-ID: 1It6HNizbAc

--HG--
extra : rebase_source : 1e96f11904abf2c38c5b4e50de7609ddc86cdd8a
2017-01-27 14:25:50 -07:00
Andrea Marchesini
5da6bc7a06 Bug 1334975 - Get rid of nsIFilePicker.show() use in gecko, r=Gijs, r=ochameau 2017-02-21 07:51:00 +01:00
Phil Ringnalda
16d671402f Merge autoland to m-c, a=merge 2017-02-20 20:26:48 -08:00
ffxbld
4ccad03e67 No bug, Automated HPKP preload list update from host bld-linux64-spot-034 - a=hpkp-update 2017-02-20 07:40:40 -08:00
ffxbld
289045d108 No bug, Automated HSTS preload list update from host bld-linux64-spot-034 - a=hsts-update 2017-02-20 07:40:37 -08:00
Iris Hsiao
15a77169b7 Merge mozilla-central to mozilla-inbound 2017-02-20 15:30:29 +08:00
ffxbld
e6df08c941 No bug, Automated HPKP preload list update from host bld-linux64-spot-078 - a=hpkp-update 2017-02-19 09:10:48 -08:00
ffxbld
b705ab918d No bug, Automated HSTS preload list update from host bld-linux64-spot-078 - a=hsts-update 2017-02-19 09:10:46 -08:00
ffxbld
12cf113033 No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update 2017-02-18 07:00:40 -08:00
ffxbld
755899dd22 No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update 2017-02-18 07:00:37 -08:00
Wes Kocher
8c4ce17711 Merge inbound to m-c a=merge
MozReview-Commit-ID: DCUf7VEDrTt
2017-02-17 13:38:51 -08:00
Wes Kocher
700ed47352 Merge autoland to central, a=merge
MozReview-Commit-ID: 3ZIZ9QEVArE
2017-02-17 12:45:42 -08:00
ffxbld
a565a10373 No bug, Automated HPKP preload list update from host bld-linux64-spot-381 - a=hpkp-update 2017-02-17 07:06:37 -08:00
ffxbld
5c04bdbade No bug, Automated HSTS preload list update from host bld-linux64-spot-381 - a=hsts-update 2017-02-17 07:06:35 -08:00
Phil Ringnalda
87ae1a50e4 Backed out 5 changesets (bug 1284897) for mozilla::SandboxPermissions::RemovePermissionsForProcess crashes
Backed out changeset 19b2fcee13a9 (bug 1284897)
Backed out changeset a5171791437f (bug 1284897)
Backed out changeset 3ea8b8a18515 (bug 1284897)
Backed out changeset 21497a4e3bde (bug 1284897)
Backed out changeset 12e17d5f0fa9 (bug 1284897)
2017-02-16 22:14:15 -08:00
Vedant Sareen
7d4bd52fae Bug 1330907 - Rename Telemetry::ID to Telemetry::HistogramID. r=dexter
Changed |print("enum ID : uint32_t {", file=output)| to |print("enum HistogramID : uint32_t {", file=output)| at line 53 of the file |toolkit/components/telemetry/gen-histogram-enum.py|, and then replaced all the textual occurrences of |Telemetry::ID| to |Telemetry::HistogramID| and |ID| to |HistogramID| in 43 other files.
2017-02-16 00:45:15 +05:30
Carsten "Tomcat" Book
85079555b0 Merge mozilla-central to autoland 2017-02-20 14:12:30 +01:00
Sebastian Hengst
68e7240c0c Backed out changeset 71b9ac06a60a (bug 1284897) 2017-02-21 23:13:29 +01:00
Sebastian Hengst
0155610268 Backed out changeset 0740284125d3 (bug 1284897) 2017-02-21 23:13:24 +01:00
EKR
caac1dd24c Bug 1340854 - Properly report TLS handshake telemetry for 0 length reads. r=mt 2017-02-18 11:27:21 -08:00
David Parks
7f64ae96ea Bug 1284897 - Add mechanism to libsandbox_s to track names of files that have been given special sandbox access permissions (PermissionsService). r=bobowen
Hook this into the browser via the XREAppData. This patch contains only the changes to Chromium source code.

--HG--
extra : rebase_source : f1ddd3bdfb52cef0a2dc8bfbae4ba5c78e7fd7eb
2017-01-20 08:27:57 -08:00
David Parks
26437f4ecd Bug 1284897 - Add mechanism to libsandbox_s to track names of files that have been given special sandbox access permissions (PermissionsService). r=bobowen, r=glandium
Hook this into the browser via the XREAppData. This patch does not include the changes to Chromium source code.

--HG--
extra : rebase_source : 4d5637bcdbeae605b0b99e9192598d48f371b698
2017-02-14 15:08:40 -08:00
David Parks
3fd846f6a8 Bug 1284897 - Add mechanism to libsandbox_s to track names of files that have been given special sandbox access permissions (PermissionsService). r=bobowen
Hook this into the browser via the XREAppData. This patch contains only the changes to Chromium source code.
2017-01-20 08:27:57 -08:00
David Parks
e9bcaf4cbe Bug 1284897 - Add mechanism to libsandbox_s to track names of files that have been given special sandbox access permissions (PermissionsService). r=bobowen, r=glandium
Hook this into the browser via the XREAppData. This patch does not include the changes to Chromium source code.
2017-02-14 15:08:40 -08:00
David Major
fff91cf0bf Bug 1335632 - Split out the const and mutable parts of myTrustedEVInfos. r=keeler
.rdata:    5536 bytes change
 .data:   -5760 bytes change

--HG--
extra : rebase_source : 2aa718f0744760cab5f5146d73139dace24a3225
2017-02-17 15:31:05 +13:00
David Keeler
4b081ff27d bug 1301407 - enable nsNSSComponent initialization diagnostic crash report on all platforms r=dragana
--HG--
extra : amend_source : 56900b3bf87a8d927a9aa91672aa8593bdfe3e69
2017-02-15 14:51:45 -08:00
David Parks
5b871d6f30 Bug 1284897 - Add mechanism to libsandbox_s to track names of files that have been given special sandbox access permissions (PermissionsService). r=bobowen
Hook this into the browser via the XREAppData. This patch contains only the changes to Chromium source code.

--HG--
extra : rebase_source : 309715aa2449d53456934495b1f5e854df599bfb
extra : histedit_source : 26761a6a33e4e5b2bb559caf3b3eb51c249f2bcd
2017-01-20 08:27:57 -08:00
David Parks
82eb0f3fdd Bug 1284897 - Add mechanism to libsandbox_s to track names of files that have been given special sandbox access permissions (PermissionsService). r=bobowen, r=glandium
Hook this into the browser via the XREAppData. This patch does not include the changes to Chromium source code.

--HG--
extra : rebase_source : e34e8b50101cc40ded26e80791052123b24c8243
extra : histedit_source : 69c9b2dc91546adbfdad03b5d43842809191ffb9
2017-02-14 15:08:40 -08:00
Emanuel Hoogeveen
d8ab2e5bec Bug 1338574 - Part 6: Use MOZ_CRASH_UNSAFE_PRINTF in NSS. r=keeler
--HG--
extra : rebase_source : 85173c8c8becd9f25f5ee0385c3b7ecdc8e85cce
2017-02-21 18:02:00 +01:00
ffxbld
a2f6f5b441 No bug, Automated HPKP preload list update from host bld-linux64-spot-022 - a=hpkp-update 2017-02-16 08:04:27 -08:00
ffxbld
86974fabaf No bug, Automated HSTS preload list update from host bld-linux64-spot-022 - a=hsts-update 2017-02-16 08:04:24 -08:00
Wes Kocher
72ecfb5fd6 Merge m-c to autoland, a=merge
MozReview-Commit-ID: 7gVISUXnm2Q
2017-02-22 15:07:12 -08:00
Kate McKinley
c69d150710 Bug 1339669 - Update security.mixed_content.hsts_priming_cache_timeout default r=mayhemer
MozReview-Commit-ID: CNFrPUyrdO8

--HG--
extra : rebase_source : 858da20cf65369ede5908b07921dfba501956b84
2017-02-16 10:48:59 +09:00
Wes Kocher
017c515285 Merge inbound to m-c a=merge
MozReview-Commit-ID: IKI0zVtF1n9
2017-02-15 16:18:13 -08:00
Wes Kocher
ec985117e6 Merge autoland to central, a=merge
MozReview-Commit-ID: 9FDTT0Vkl0L
2017-02-15 15:26:11 -08:00
ffxbld
c1cc1aa5b1 No bug, Automated HPKP preload list update from host bld-linux64-spot-032 - a=hpkp-update 2017-02-15 07:22:17 -08:00
ffxbld
c9a6d4e82f No bug, Automated HSTS preload list update from host bld-linux64-spot-032 - a=hsts-update 2017-02-15 07:22:14 -08:00
Carsten "Tomcat" Book
ed3d8d8286 merge mozilla-inbound to mozilla-central a=merge 2017-02-15 12:21:44 +01:00
Wes Kocher
f85117da36 Merge m-c to inbound, a=merge
MozReview-Commit-ID: 1c81Eie63Pe
2017-02-14 14:45:40 -08:00
Wes Kocher
cac6cb6a10 Merge inbound to central, a=merge
MozReview-Commit-ID: 1D2zbWPC8TT
2017-02-14 13:12:20 -08:00
ffxbld
ac8a72f2d5 No bug, Automated HPKP preload list update from host bld-linux64-spot-086 - a=hpkp-update 2017-02-14 07:14:02 -08:00
ffxbld
b904921c76 No bug, Automated HSTS preload list update from host bld-linux64-spot-086 - a=hsts-update 2017-02-14 07:13:59 -08:00
EKR
785f12a554 Bug 1331280 - Generic telemetry probe for TLS handshake status. r=keeler
--HG--
extra : rebase_source : 69a2e93a5cd8d500702a670dfaa5e6cebb822ff0
2017-02-14 13:12:00 -05:00
Carsten "Tomcat" Book
8c454e1c69 Merge mozilla-central to mozilla-inbound 2017-02-15 12:43:50 +01:00
Bob Owen
209be0e8ce Bug 1339389: Remove legacy build config from Windows SandboxBroker moz.build. r=glandium
MozReview-Commit-ID: KA3dCxrCZRo
2017-02-15 08:31:14 +00:00
Wes Kocher
5583be3ddf Merge m-c to autoland, a=merge
MozReview-Commit-ID: KkIFx9ndC8y
2017-02-14 14:46:45 -08:00
David Keeler
2950b86660 bug 1339010 - ensure pinning and CT telemetry info has been initialized r=jcj
MozReview-Commit-ID: F7pOqCK145n

--HG--
extra : rebase_source : 7138aca9769f6719e35073f16b835159c7929684
2017-02-13 16:47:43 -08:00
Wes Kocher
415dbf1a26 Merge m-c to autoland, a=merge
MozReview-Commit-ID: JuiEcsYYLS3
2017-02-13 17:08:00 -08:00
Wes Kocher
05bee27cec Merge autoland to central, a=merge
MozReview-Commit-ID: 3sGhLpcvp7K
2017-02-13 16:49:15 -08:00
ffxbld
e80ac94bd8 No bug, Automated HPKP preload list update from host bld-linux64-spot-308 - a=hpkp-update 2017-02-13 07:05:42 -08:00
ffxbld
7027f8a7e2 No bug, Automated HSTS preload list update from host bld-linux64-spot-308 - a=hsts-update 2017-02-13 07:05:39 -08:00
Phil Ringnalda
ea85356f95 Merge m-c to m-i 2017-02-12 15:33:29 -08:00
David Major
66f98480ef Bug 1335294: Remove const from data tables under security/ for better codegen on Windows. r=keeler
MozReview-Commit-ID: 3k1Gpm0ugY2
2017-02-13 09:41:20 +13:00
ffxbld
9057f0c449 No bug, Automated HPKP preload list update from host bld-linux64-spot-031 - a=hpkp-update 2017-02-12 07:27:38 -08:00
ffxbld
dfb75b1bd9 No bug, Automated HSTS preload list update from host bld-linux64-spot-031 - a=hsts-update 2017-02-12 07:27:36 -08:00
ffxbld
3f38ad8e9c No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-02-11 07:51:02 -08:00
ffxbld
f27f804b88 No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-02-11 07:50:59 -08:00
Wes Kocher
71842da0e8 Merge autoland to central, a=merge
MozReview-Commit-ID: 8GR9XTMPAjp

--HG--
rename : netwerk/base/security-prefs.js => security/manager/ssl/security-prefs.js
2017-02-10 14:32:26 -08:00
ffxbld
7de3f46c87 No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-02-10 07:05:40 -08:00
ffxbld
7f6d91a361 No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-02-10 07:05:38 -08:00
Iris Hsiao
24ddf955dd Backed out changeset e887fb5d5d06 (bug 1337748) for eslint failure
--HG--
rename : security/manager/ssl/security-prefs.js => netwerk/base/security-prefs.js
2017-02-10 14:00:02 +08:00
Masatoshi Kimura
2154e8d95a Bug 1337748 - Move security-prefs.js from netwerk/ to security/manager/. r=keeler,mcmanus
MozReview-Commit-ID: 2TOJG6tRWJZ

--HG--
rename : netwerk/base/security-prefs.js => security/manager/ssl/security-prefs.js
extra : rebase_source : 4127a5c9676f24d17a0f38efed8e9ad558044b07
2017-02-08 21:16:27 +09:00
Phil Ringnalda
b5acb9b812 Backed out 2 changesets (bug 1336867) for (at least) eslint failures
CLOSED TREE

Backed out changeset 0a4f283638cb (bug 1336867)
Backed out changeset 837766805d75 (bug 1336867)

--HG--
rename : security/manager/ssl/tests/unit/test_sts_parser.js => security/manager/ssl/tests/gtest/STSParserTest.cpp
2017-02-09 19:02:32 -08:00
Jonathan Hao
ef8f78b212 Bug 1336867 - Remove unsafeProcessHeader and isSecureHost in nsISiteSecurityService r=keeler,mgoodwin,past
--HG--
extra : rebase_source : e4a69e18154adf22e045c820ae2b3fd8a77877a6
2017-02-08 11:17:29 +08:00
Jonathan Hao
c449723684 Bug 1336867 - Move STSParserTest.cpp to test_sts_parser.js r=keeler
--HG--
rename : security/manager/ssl/tests/gtest/STSParserTest.cpp => security/manager/ssl/tests/unit/test_sts_parser.js
extra : rebase_source : dfadaa8f9f0030e07a4ea7bf64e36a7b4d959521
2017-02-07 10:23:45 +08:00
Jonathan Hao
e28cb314a8 Bug 1336867 - Remove unsafeProcessHeader and isSecureHost in nsISiteSecurityService r=keeler,mgoodwin,past
--HG--
extra : rebase_source : 3b14ddfcb4107eeeb15ba5498d0b516310847c58
2017-02-08 11:17:29 +08:00
Jonathan Hao
8b8bdd6f07 Bug 1336867 - Move STSParserTest.cpp to test_sts_parser.js r=keeler
--HG--
rename : security/manager/ssl/tests/gtest/STSParserTest.cpp => security/manager/ssl/tests/unit/test_sts_parser.js
extra : rebase_source : dfadaa8f9f0030e07a4ea7bf64e36a7b4d959521
2017-02-07 10:23:45 +08:00
Wes Kocher
e27ab18a24 Merge autoland to central, a=merge
MozReview-Commit-ID: Cu9iXbDAS7t
2017-02-09 16:36:11 -08:00
ffxbld
7d72c6ef47 No bug, Automated HPKP preload list update from host bld-linux64-spot-387 - a=hpkp-update 2017-02-09 07:37:08 -08:00
ffxbld
7efff53231 No bug, Automated HSTS preload list update from host bld-linux64-spot-387 - a=hsts-update 2017-02-09 07:37:04 -08:00
Cykesiopka
35ac12c63d Bug 1331983 - Avoid non-smart string IDL types in nsIX509CertDB.idl. r=gcp,keeler,nwgh
Smart string classes like nsCString are safer to use than raw |char*| strings,
and are typically easier to deal with as well.

MozReview-Commit-ID: 2PdrCa6cbpe

--HG--
extra : rebase_source : a8730dd48e954f4947534a0d4d524848061dac98
2017-02-09 23:11:29 +08:00
Masatoshi Kimura
448874c0f1 Bug 1337748 - Move security-prefs.js from netwerk/ to security/manager/. r=keeler,mcmanus
MozReview-Commit-ID: 2TOJG6tRWJZ

--HG--
rename : netwerk/base/security-prefs.js => security/manager/ssl/security-prefs.js
extra : rebase_source : e11ef6fa7264edd41e77d65512a2183c737f34dd
2017-02-08 21:16:27 +09:00
David Keeler
a280d5294c bug 1338701 - constify all TransportSecurityPreloads, use mozilla::BinarySearch over bsearch r=Cykesiopka
MozReview-Commit-ID: Lu3H9SpyJgR

--HG--
extra : rebase_source : 7a958793523bc8d4e9d34a7b3b26760a3c1da0f9
2017-02-10 15:52:26 -08:00
Sylvestre Ledru
26605e4a7d Bug 1337358 - Converts for(...; ...; ...) loops to use the new range-based loops in C++11 in security/sandbox/ r=gcp
MozReview-Commit-ID: Iwj7i07LkJ0

--HG--
extra : rebase_source : 88a71d78dd6d3e4cf603047a5714631b4ae4542b
2017-02-08 11:59:38 +01:00
Sylvestre Ledru
aba86ae938 Bug 1337358 - Converts for(...; ...; ...) loops to use the new range-based loops in C++11 in security/ r=keeler
MozReview-Commit-ID: yfkQVEp2do

--HG--
extra : rebase_source : 048f30343b9eb353bbc15fbde157ffbb3b2da8ec
2017-02-07 13:22:44 +01:00
Carsten "Tomcat" Book
6215212efa Merge mozilla-central to mozilla-inbound 2017-02-14 13:41:43 +01:00
Matt Woodrow
0686551eab Bug 1325227 - Part 3: Allow child process to share semaphore handles with the parent/gpu processes. r=bobowen 2017-02-04 23:19:03 +13:00
Sylvestre Ledru
455bdf24fe Bug 1338086 - Remove useless else blocks in order to reduce complexity in security/sandbox/linux/ r=gcp
MozReview-Commit-ID: 5UWtAe6THd6

--HG--
extra : rebase_source : 17af6640439f209cb37e91552cf0f97043bd9e91
2017-02-09 10:56:05 +01:00
Jonathan Hao
f7fe4cbe12 Bug 1323644 - Isolate the HSTS and HPKP storage by first party domain (ForgetAboutSite) r=keeler,mossop
MozReview-Commit-ID: LjYb5coVxJl

--HG--
extra : rebase_source : 0a1cc4b70b266958c478ff48d9edc1e669ebb33f
2017-02-14 10:29:54 +08:00
Jonathan Hao
4489e44dc2 Bug 1323644 - Isolate the HSTS and HPKP storage by first party domain (PSM) r=Cykesiopka,keeler
MozReview-Commit-ID: HhFFqtpBNjO

--HG--
extra : rebase_source : 980dfd035efc4886a7ca393923c2c2783cc76a7d
2017-02-14 10:29:10 +08:00
ffxbld
166c51d181 No bug, Automated HPKP preload list update from host bld-linux64-spot-013 - a=hpkp-update 2017-02-08 07:19:15 -08:00